Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for O-KAM Client by VStarcam

    CVE-2026-120336 (GCVE-0-2026-120336)

    Vulnerability from nvd – Published: 2026-11-02 03:15 – Updated: 2026-11-02 03:15
    VLAI
    Title
    VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflow
    Summary
    A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
    CWE
    Assigner
    VulDB CNA under the mitre root
    CNA scorecard B 83/100 over 3793 records in the last 180 days details
    References
    URL Tags
    https://vuldb.com/vuln/429661 vdb-entrytechnical-description
    https://vuldb.com/vuln/429661/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-120336 third-party-advisory
    https://vuldb.com/submit/1016301 third-party-advisory
    https://gist.github.com/Ishanoshada/f6345a42a46e1… exploit
    Impacted products
    Vendor Product Version
    VStarcam O-KAM Client Affected: 1.3.3.32
        cpe:2.3:a:vstarcam:o-kam_client:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:vstarcam:o-kam_client:*:*:*:*:*:*:*:*"
              ],
              "product": "O-KAM Client",
              "vendor": "VStarcam",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.3.3.32"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "coordinator",
              "value": "VulDB CNA Team"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 7.3,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 7.3,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 7.5,
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-121",
                  "description": "Stack-based Buffer Overflow",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-119",
                  "description": "Memory Corruption",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-11-02T03:15:18.679Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-429661 | VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflow",
              "tags": [
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://vuldb.com/vuln/429661"
            },
            {
              "name": "VDB-429661 | CTI Indicators (IOB, IOC, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/vuln/429661/cti"
            },
            {
              "name": "CVE-2026-120336 | CVE Analysis and Report",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/cve/CVE-2026-120336"
            },
            {
              "name": "Submit #1016301 | Shenzhen VStarcam Technology Co., Ltd O-KAM Client (DevDll_925.dll) 1.3.3.32 CWE-121: Stack-based Buffer Overflow",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/1016301"
            },
            {
              "tags": [
                "exploit"
              ],
              "url": "https://gist.github.com/Ishanoshada/f6345a42a46e1345e6c7400aac311d77"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-11-01T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2026-11-01T01:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2026-11-01T15:41:48.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflow",
          "x_generator": [
            "VulDB PVTS v202611"
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2026-120336",
        "datePublished": "2026-11-02T03:15:18.679Z",
        "dateReserved": "2026-11-01T14:36:38.832Z",
        "dateUpdated": "2026-11-02T03:15:18.679Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-120336 (GCVE-0-2026-120336)

    Vulnerability from cvelistv5 – Published: 2026-11-02 03:15 – Updated: 2026-11-02 03:15
    VLAI
    Title
    VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflow
    Summary
    A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
    CWE
    Assigner
    VulDB CNA under the mitre root
    CNA scorecard B 83/100 over 3793 records in the last 180 days details
    References
    URL Tags
    https://vuldb.com/vuln/429661 vdb-entrytechnical-description
    https://vuldb.com/vuln/429661/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-120336 third-party-advisory
    https://vuldb.com/submit/1016301 third-party-advisory
    https://gist.github.com/Ishanoshada/f6345a42a46e1… exploit
    Impacted products
    Vendor Product Version
    VStarcam O-KAM Client Affected: 1.3.3.32
        cpe:2.3:a:vstarcam:o-kam_client:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:vstarcam:o-kam_client:*:*:*:*:*:*:*:*"
              ],
              "product": "O-KAM Client",
              "vendor": "VStarcam",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.3.3.32"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "coordinator",
              "value": "VulDB CNA Team"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability was found in VStarcam O-KAM Client 1.3.3.32. Affected by this vulnerability is the function FUN_10003EA0 in the library DevDll_925.dll. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 6.9,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 7.3,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 7.3,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 7.5,
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-121",
                  "description": "Stack-based Buffer Overflow",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-119",
                  "description": "Memory Corruption",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-11-02T03:15:18.679Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-429661 | VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflow",
              "tags": [
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://vuldb.com/vuln/429661"
            },
            {
              "name": "VDB-429661 | CTI Indicators (IOB, IOC, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/vuln/429661/cti"
            },
            {
              "name": "CVE-2026-120336 | CVE Analysis and Report",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/cve/CVE-2026-120336"
            },
            {
              "name": "Submit #1016301 | Shenzhen VStarcam Technology Co., Ltd O-KAM Client (DevDll_925.dll) 1.3.3.32 CWE-121: Stack-based Buffer Overflow",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/1016301"
            },
            {
              "tags": [
                "exploit"
              ],
              "url": "https://gist.github.com/Ishanoshada/f6345a42a46e1345e6c7400aac311d77"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-11-01T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2026-11-01T01:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2026-11-01T15:41:48.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "VStarcam O-KAM Client DevDll_925.dll FUN_10003EA0 stack-based overflow",
          "x_generator": [
            "VulDB PVTS v202611"
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2026-120336",
        "datePublished": "2026-11-02T03:15:18.679Z",
        "dateReserved": "2026-11-01T14:36:38.832Z",
        "dateUpdated": "2026-11-02T03:15:18.679Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }